“There’s a fundamental tension in authorization.”
Teams told Oso they had spent 18 months building an authorization service. Others said theirs was too simple to need one, or too custom to split out. Authorization is business logic wearing a security badge. The author also sells an authorization product, so read the conclusion accordingly.